List velocity anomalies
curl --request GET \
--url https://api.truthlocks.com/v1/risk/velocity \
--header 'X-API-Key: <api-key>'const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};
fetch('https://api.truthlocks.com/v1/risk/velocity', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.truthlocks.com/v1/risk/velocity"
headers = {"X-API-Key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.truthlocks.com/v1/risk/velocity"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("X-API-Key", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}{
"items": [
{
"subject_id": "<string>",
"action": "<string>",
"count": 123,
"threshold": 123,
"severity": "<string>"
}
]
}{
"code": "AUTH_REQUIRED",
"message": "Authentication required",
"http_status": 401
}Velocity Scoring
List velocity anomalies
List subjects with velocity scores above a threshold. Use this to identify high-velocity anomalies across your tenant.
GET
/
v1
/
risk
/
velocity
List velocity anomalies
curl --request GET \
--url https://api.truthlocks.com/v1/risk/velocity \
--header 'X-API-Key: <api-key>'const options = {method: 'GET', headers: {'X-API-Key': '<api-key>'}};
fetch('https://api.truthlocks.com/v1/risk/velocity', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.truthlocks.com/v1/risk/velocity"
headers = {"X-API-Key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.truthlocks.com/v1/risk/velocity"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("X-API-Key", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}{
"items": [
{
"subject_id": "<string>",
"action": "<string>",
"count": 123,
"threshold": 123,
"severity": "<string>"
}
]
}{
"code": "AUTH_REQUIRED",
"message": "Authentication required",
"http_status": 401
}Returns a paginated list of subjects whose velocity score meets or exceeds the specified threshold. Use this endpoint to monitor for velocity anomalies across your tenant without querying individual subjects.
Results are sorted by velocity score (highest first) and support cursor-based pagination. See the velocity and anomaly scoring guide for the scoring model and integration patterns.
Response
array
List of subjects with elevated velocity scores. Each entry includes
subject_id, action_type, windows (with 1m, 5m, 1h, 24h counts), velocity_score, and last_recorded_at.string
Pagination cursor for the next page.
null when there are no more results.
